Certificate
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer
File: NjVI7UYolmJIIEwv5pBl8Ne1J6M.cer (raw, json)
Hash identifier: /yB549ZRFlFJYjPsXWDawx05AVuyTyfboGuvJ5o6/9w=
Subject key identifier: 36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
Authority key identifier: 2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
Certificate issuer: /CN=2a94a8dd554ae701072099c70b6407555ddde669
Certificate serial: 018CC493874527449F859920D04E8D6AFC5A
Authority info access: rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Manifest: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
caRepository: rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/
Notify URL: https://rrdp.ripe.net/notification.xml
Certificate not before: Mon 01 Jan 2024 10:30:51 +0000
Certificate not after: Tue 01 Jul 2025 00:00:00 +0000
Subordinate resources: AS: 202523
IP: 185.91.240.0/22
IP: 2a05:ee80::/29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 May 2024 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:8c:c4:93:87:45:27:44:9f:85:99:20:d0:4e:8d:6a:fc:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2a94a8dd554ae701072099c70b6407555ddde669
Validity
Not Before: Jan 1 10:30:51 2024 GMT
Not After : Jul 1 00:00:00 2025 GMT
Subject: CN=363548ed4628966248204c2fe69065f0d7b527a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:ae:46:29:b1:52:f1:15:14:f2:aa:24:51:a8:
87:45:32:f6:88:b0:3b:77:08:11:12:eb:b9:d7:63:
a9:fa:f2:bf:54:f1:24:02:6f:13:0d:06:d1:68:76:
b8:87:51:58:41:8c:00:34:da:f3:f2:82:3e:44:da:
fc:3a:2b:b0:78:5f:a0:8a:99:51:9f:c8:9d:57:9a:
90:cc:42:0a:b7:ef:ce:d1:bd:0b:ea:75:9d:be:49:
80:4a:f3:52:0e:58:e8:00:1c:a1:d1:fc:8f:ae:af:
d4:dc:1a:03:42:df:b2:18:7d:cf:b4:67:e0:ab:24:
59:47:4a:e7:cd:c2:c0:f5:a3:f2:cc:df:2c:90:c9:
4d:9e:56:0c:be:dd:45:3c:77:15:b6:75:2c:6b:eb:
b2:5b:77:9f:4d:d8:2a:94:48:27:c1:94:ad:2b:a5:
8a:6a:23:a8:a5:54:06:dc:9b:10:a8:c8:3d:54:64:
7b:6e:3a:51:48:70:95:4a:59:20:47:e3:28:11:08:
77:1a:96:f3:b3:29:5b:9d:b0:4c:35:4d:a9:3d:ce:
79:1d:5c:6c:c3:da:5f:00:4d:10:cd:20:73:59:d3:
35:32:95:d7:00:ca:44:ac:6e:5e:75:0b:fd:e3:5c:
85:86:28:37:3a:b4:75:08:29:27:52:ad:17:2d:a8:
10:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:35:48:ED:46:28:96:62:48:20:4C:2F:E6:90:65:F0:D7:B5:27:A3
X509v3 Authority Key Identifier:
keyid:2A:94:A8:DD:55:4A:E7:01:07:20:99:C7:0B:64:07:55:5D:DD:E6:69
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
Subject Information Access:
CA Repository - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/
RPKI Manifest - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/55dc83-2707-4917-b63f-95c4e94ad0a9/1/NjVI7UYolmJIIEwv5pBl8Ne1J6M.mft
RPKI Notify - URI:https://rrdp.ripe.net/notification.xml
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.91.240.0/22
IPv6:
2a05:ee80::/29
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
202523
Signature Algorithm: sha256WithRSAEncryption
09:0b:c6:4c:0b:05:a2:62:ed:25:15:ac:ee:84:0b:6e:30:00:
8f:99:dd:69:52:f1:09:b9:d9:62:28:32:25:a6:85:44:66:2b:
44:f3:dc:2a:3e:3c:4e:c5:88:b1:ea:ce:f1:d9:4a:a0:05:77:
f6:33:5f:88:43:14:6d:f7:9a:c2:a3:3a:f2:72:1a:52:b3:fb:
7b:b9:46:00:7d:56:23:ea:99:a4:47:2a:2a:25:c7:b5:b2:3a:
e0:18:a4:f4:bd:07:f7:40:a1:07:e2:d6:ea:a1:33:4f:ca:8b:
e0:29:b2:1f:f0:ee:c3:c7:4f:6e:51:44:74:90:96:19:e5:5d:
1c:11:03:42:aa:4d:c0:1d:5f:64:01:b1:75:04:d9:4c:95:c4:
16:09:ca:42:b3:76:4a:16:3a:26:13:70:60:b8:fc:4b:1f:66:
a3:8b:f5:7b:02:12:b5:17:08:85:8b:15:62:a7:6d:d2:06:18:
2b:04:f2:33:18:17:1f:16:64:ed:f1:4e:ff:d6:4f:e1:15:03:
54:4d:19:3a:27:29:2f:a9:f8:7e:7b:c4:b9:01:65:f8:65:f5:
b4:d5:0b:16:a3:51:cd:c5:91:c5:3b:0c:2d:4f:6b:18:90:ff:
61:06:14:09:b0:b7:f5:e4:66:ca:96:10:f3:17:9c:bb:15:cd:
7a:80:f7:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 13:13:41 2024 by rpki-client on console-fra.rpki-client.org